Privacy

The operator named in the imprint is responsible for the processing. For privacy questions, a message to the email address given there is enough.

• Account data: name, email address, phone number, password — the latter only as an Argon2 hash, never in plain text
• Profile details: city, language preference, notification settings
• Listing data: vehicle details, photos, price, location
• Messages between users and enquiries about listings
• Usage data: listings viewed, saved searches, saved vehicles
• Payment data: amount, time, status and the payment provider's reference — never the card number

To perform the user contract: account, listings, messages, search.

To handle paid services and to meet statutory retention obligations.

To prevent fraud and abuse: reviewing listings, limiting sign-in attempts, handling reports.

LEVIZ never collects, processes or stores card numbers. They are entered only on the payment provider's page; LEVIZ receives from it only the amount, the status and a reference.

Dealer accounts must prove their identity; private sellers may do so voluntarily. This involves uploading an ID card, the business registration and proof of address.

These documents are stored separately from all public files and are never reachable through a public address. Only LEVIZ administrators can view them, and only to review the request.

They are deleted automatically 90 days after the decision. What remains is only that a review took place, when, and with what outcome — not the document itself.

Other users see what is published in a listing, and the name shown with a message.

Service providers process data on our behalf: hosting, database, file storage, payment provider, and email and SMS delivery. They are bound by contract and may not use the data for their own purposes.

Data is disclosed to authorities only where required by law.

The iOS and Android app processes the same data as the website — account, listings, messages — through the same server.

Push notifications are delivered through the Expo service and the services of Apple and Google. For this we store a device token; it is deleted when you log out or switch notifications off. The title and a short excerpt of the notification text pass through these services.

To see what works and where errors occur, the app sends usage data and crash reports to PostHog (servers in the EU). Not included are your name, email address or phone number — only a technical identifier and the screens used. You can switch this off in the app under Account → "Share usage data".

Account data is deleted when the account is deleted. Listings and messages are removed or anonymised at the same time.

Payment records are kept for the statutory retention period, including after an account is deleted.

Access to the stored data, correction of inaccurate details, erasure, restriction of processing, objection and data portability.

Name, phone number, city and notification settings can be changed at any time under Settings.

You have the right to complain to the supervisory authority for the protection of personal data.

Transmission is encrypted. Passwords are stored with Argon2id and cannot be read even by the operator. Access to protected areas is checked on the server for every request.